{"uuid": "02574119-34f6-4b07-8074-25cb62e9344a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15409", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3112", "content": "\ud83d\udd34 UK Council Attack Linked to Mass Exploitation of SonicWall Flaw\n\nA critical SonicWall flaw was rapidly weaponized, with a UK Council attack linked to a campaign that exposed credentials and enabled Active Directory theft.\n\nOn July 17, 2026, the Borough Council of King\u2019s Lynn and West Norfolk announced it had detected a cyberattack affecting council services. Hunt.io has since published a detailed technical analysis linking that incident, with moderate confidence, to a wider mass-exploitation campaign against SonicWall SMA1000 appliances using CVE-2026-15409, a maximum-severity SSRF flaw that received a CVSS score of 10.0.", "creation_timestamp": "2026-09-14T00:00:30.016130Z"}